Privacy Policy

This Privacy Policy describes how eonik (“we”, “us”, or “our”) collects, uses, and shares information when you use our website, platform, and browser extension (collectively, the “Services”). By using our Services, you agree to the practices described here.

1. Information We Collect

We collect information you provide directly, information generated through your use of the Services, and limited information from third-party sign-in providers.

• Account information: name, email address, and profile photo. Collected when you create an account or sign in via Google.
• Brand and campaign data: brand names, product categories, target audiences, and ad creative content you save or upload to the platform.
• Usage data: features you interact with, actions you take, and general activity within the Services.
• Device and technical data: browser type, operating system, IP address, and diagnostic information used to maintain service reliability.
• Payment information: billing details processed by our payment providers — Dodo Payments for subscriptions bought on the web, and Shopify for subscriptions bought through the Shopify App Store. We never see or store raw card numbers.
• Connected store data (Shopify): if you connect a Shopify store, we receive a record of paid orders and store, for each one, the Shopify order identifier, order total, currency, the marketing attribution parameters attached to it (utm_source, utm_medium, utm_campaign, utm_content) and the landing page URL. We use this solely to show you which of your ad creatives produced revenue. We do not request, receive or store your customers’ names, email addresses, phone numbers or postal addresses, and we never contact your customers or sell, rent or share this data.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Services
• Authenticate your account and keep your session secure
• Deliver AI-powered analysis and creative research on content you save
• Personalise your experience based on your brand profile
• Send transactional communications about your account (receipts, important updates)
• Detect and prevent fraud, abuse, or security incidents
• Attribute revenue from a connected Shopify store to the ad creatives that earned it

We do not use your creative content or brand data to train shared AI models. Your data is isolated to your account.

3. Information Sharing

We do not sell or rent your personal information. We share data only in the following circumstances:

• Service providers (sub-processors): vendors who help us operate the Services — cloud infrastructure and file storage (Amazon Web Services), database hosting (Supabase), payment processing (Dodo Payments; Shopify for App Store subscriptions), AI processing (Google Gemini / Vertex AI), and error and performance monitoring (Sentry). Each accesses only the data necessary to perform its function and is bound by confidentiality obligations. Connected-store order data is never sent to any AI processor.
• Google sign-in: when you authenticate via Google, your email, name, and profile photo are retrieved from Google in accordance with the Google Privacy Policy.
• Legal requirements: if required by law, court order, or to protect the rights and safety of eonik or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Storage & Security

Your data is stored on secure servers with encryption at rest and in transit (TLS). We apply access controls to ensure only you can access your account data. No system is perfectly secure, and we encourage you to use a strong password and keep your credentials private.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by applicable law.

For a connected Shopify store, retention is tied to the connection: when the app is uninstalled, Shopify notifies us and we delete that store’s connection record and every order record we hold for it. We also honour Shopify’s customer data request and customer redaction notifications.

6. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data. To make a request, email us at connect@eonik.ai. We will respond within 30 days.

7. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyse usage patterns. You can manage cookie preferences through your browser settings, though disabling certain cookies may affect functionality.

8. Third-Party Links

Our Services may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their policies independently.

9. Children’s Privacy

Our Services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have done so inadvertently, please contact us so we can delete it.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or an in-product notice. Continued use of the Services after the effective date constitutes acceptance of the revised policy.

11. Contact Us

Questions, deletion requests, or data-related inquiries: connect@eonik.ai.